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Classical communications are used in the post-processing procedure of quantum key distribution. 
Since the security of quantum key distribution is based on the principles of quantum mechanics, 
intuitively the secret key can only be derived from the quantum states. We find that classical 
communications are incorrectly used in the so-called quantum dialogue type protocols. In these 
protocols, public communications are used to transmit secret messages. Our calculations show that 
half of Alice's and Bob's secret message is leaked through classical channel. By applying Holevo 
bound, we can see that the quantum efficiency claimed in the quantum dialogue type of protocols 
is not achievable. 
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I. INTRODUCTION 

Quantum key distribution (QKD) is an uncondition- 
ally secure method by which a private key can be created 
between two parties, Alice and Bob, who share a quan- 
tum channel and a public authenticated classical chan- 
nel. Since the pioneer QKD protocol was presented by 
Bennett and Brassard in 1984 [![, its security has been 
studied intensively @, H, 0]. In BB84 protocol, Alice 
randomly selects one of four states in two complemen- 
tary bases to encode her secret message and Bob also 
randomly selects one of the two bases to decode Alice's 
key bits. Consequently, basis reconciliation is necessary 
in BB84 protocol. Recently, the quantum secure direct 
communication (QSDC) protocols have been presented 
0,110, SUES- In the QSDC protocols, Bob can decode 
Alice's encoded message directly after his measurement 
and they don't need to do basis reconciliation. Based on 
the idea of QSDC, a new type of quantum communica- 
tion protocol, called quantum dialogue (QD), has been 
presented QH El El, El ■ 

In the entanglement-based QD protocol [12], it is 
claimed that both Alice and Bob can encode two-bit se- 
cret message on an EPR pair. After a public announce- 
ment, both Alice and Bob can obtain two-bit secret mes- 
sage from each other. That is, Alice and Bob can encode 
four-bit secret message in one EPR pair. Likewise, in 
a single- photon QD protocol [HI], both Alice and Bob 
can encode one-bit secret message on a photon. So, both 
Alice and Bob can obtain one-bit secret message from 
each other. It is claimed that one qubit can be used to 
transmit two-bit secret message fl3j , where the quantum 
efficiency is four times than BB84. 

In this paper, we prove that QD protocol presented 
by [HI, El El E3 are insecure because classical com- 



munication is erroneously used in these protocols. Alice 
and Bob's encoding operations are correlated given the 
published measurement results. Our calculations show 
that Eve can gain half information of Alice and Bob's se- 
cret message only by listening the classical channel. By 
applying Holevo bound, we can see that the quantum effi- 
ciency claimed in the quantum dialogue type of protocols 
[H El El, El is not achievable. 



II. REVIEW THE QUANTUM DIALOGUE 
PROTOCOL 



There are three types of QD protocols, quantum dense 
key distribution using entanglement which is the 
prototype of quantum dialogue, QD protocol based on 
EPR pairs [l2| and QD protocol with single photon 



13[. Let us briefly review the idea of QD here 
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sources 

[l2| . Alice first prepares an EPR pair in the singlet state 
|* AB ), where \VJ B ) = -±=(\0 A 1 B ) - |1 A B )). She keeps 
one qubit A in her laboratory and sends the other qubit 
B to Bob. After receiving qubit B, Bob may randomly 
select message mode (MM) or control mode (CM). In 
CM, Bob performs a local measurement on qubit B and 
tells measurement results to Alice. After receiving Bob's 
announcement, Alice also switches to CM and measures 
her qubit A. Alice and Bob can estimate the fidelity of 
EPR pair after enough runs of CM. The QD transmis- 
sion will be aborted if the fidelity of the EPR pair is 
lower than some certain threshold. In MM, after receiv- 
ing qubit B, Bob performs a unitary operation U B on 
qubit B to encode his secret message and then sends it 
back to Alice. After receiving the back qubit B, Alice 
first performs a unitary operation U A on qubit A and 
the state becomes \^ab) = U A U B \^ B ). Next, Alice 
announces her measurement result I^ab) through the 
classical channel. Since Alice knows her own encoding 
operation U A and the measurement result I^ab), she 
can exactly know Bob's encoding operation U B to attain 
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Bob's encoded message. Likewise, Bob can obtain Alice's 
encoded message according to \^ab) and U B . Conse- 
quently, it seems as if both Alice and Bob can transmit 
one-bit "secret" message to each other simultaneously so 
that we call this protocol QD. In Ref. 12], both Alice and 
Bob use four unitary operations coo, coi, cio, cii to en- 
code their secret message, 00, 01, 10, 11, respectively. 
Consequently, both Alice and Bob can transmit two-bit 
secret message to each other in each MM. 

Likewise, in quantum dense key distribution protocol 
[Tlj . Alice first prepares one EPR pair in l^^g) and 
sends one qubit to Bob. In MM, both Alice and Bob 
encode one-bit secret message and then Alice announces 
her measurement results through classical channel. In 
this way, they can transmit one-bit secret message to 
each other. Similarly, in the single photon QD protocol 
[HI], Alice first prepares a photon in one of four states 
in two complementary bases and then both Alice and 
Bob encode one-bit secret message on it. After Alice's 
announcement, both can obtain one-bit secret message 
from each other. 



TABLE I: True value table of Alice's and Bob's encoding op- 
erations. \^ab}> 1®ab}-> I^4b)' I^ab) are tne nna ' states of 
their encoding operations af^a^l on I^ab) ana ^ h h k, I £ 0,1. 
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°00°00 

„ A „ B 
001001 

„ A „ B 
„ A „ B 
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011^00 
„ A „ B 

„ A „ B 
°01<^10 
„ A „ B 
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A H 
"01 "00 
„ A „ B 

„ A „ B 
^11^10 
„ A „ B 



l*AB> 



A « 

„ A „ B 
^11^01 
„ A „ B 

„ A „ B 
^Ol^ll 



information about Alice and Bob's secret message only 
by listening the classical cannel. 

Likewise, Eve can gain one-bit secret information only 
by listening the classical channel in the quantum dense 
key distribution protocol [ll[ . In [l3| , Eve can also obtain 
one-bit secret message by listening the classical channel. 
Therefore, QD protocols are insecure even if Alice and 
Bob hold a perfect quantum channel since half of secret 
message would be leaked through the classical channel. 
On the other hand, we will show in the following, the 
quantum efficiency claimed in QD violates Holevo bound. 



III. HALF SECRET MESSAGE LEAKED 
THROUGH PUBLIC CHANNEL 



IV. VIOLATION OF HOLEVO BOUND 



At the first glance, the QD protocol is secure since no 
one except Alice and Bob knows Alice or Bob's secret en- 
coding operations to gain their secret message. However, 
we will show in the following, anyone who can access Al- 
ice and Bob's classical channel can gain half information 
about their secret message. Eve's mean information gain 
on Alice and Bob's bits, I(AB : E), equals their relative 
entropy decrease [l7| : 



I(AB :E) = H a 



H, 



In QKD, a secret key is encoded in quantum states. So, 
the maximal secret information that can be transmitted 
in each run is completely determined by the quantum 
channel capacity. The capacity of a quantum channel is 
bounded by the Holevo bound. If information is encoded 
on a state p, the accessible information of p is bounded 
by the Holevo quantity fi~5j 



a posteriori^ 



x(p) = S(p) - ^piSipA. 



where H„ 



is the a priori entropy and H a 



postoriori 



the a postoriori entropy. In Ref. [121 ] , the a priori entropy 
Alice and Bob shared are 4 bits, that is, H a W i or i = 4. 
And the a posteriori entropy of Eve is averaged over 
all possible results r. So she can get H a posterior — 
52 r P(r)H(i\r), where H{i\r) = -'Z i P(i\r)log 2 [P(i\r)] 
is the conditional information entropy. By listening the 
classical channel, Eve can obtain Alice's measurements 



results l^^g), 



®ab) and 



4. Each 



of the four measurement results corresponds to four of Al- 
ice's and Bob's operations er^cr^. The true value table 
of their encoding operations is presented in Table I. And 

the final state, |*^ B ), |#1b)> \®ab)> ° r l $ ls)> would 
be published through classical channel. For instance, af- 
ter Alice announces her measurement result IvP 



may have that P(a$ atf 1 1 *4s» 
P(af af \\^ B )) = Pia^af^ 



r B 

01 



AB 
I* 



}, Eve 
ab)) = 



AB 



P«^o 

)) = | (Here P{x\y) 
is the probability of x conditioned on y, and we assume 
that Alice and Bob's operations are random). In this 
case, Eve's information about Alice and Bob's secret mes- 
sage is I(AB : E) = 2. That is, Eve can obtain half 



where p — '^2 i PiP i - In quantum communication, the mu- 
tual information I(A : B) between Alice and Bob should 
be less than the Holevo bound i.e., I {A : B) < 

S(p) — J2iPiS(Pi)- I n 03; the quantum channel capac- 
ity is bounded by log 2 4 = 2, i.e., at most two-bit se- 
cret message can be encoded in each MM. As has been 
discussed above, Alice and Bob encodes four bits secret 
message in each MM, so that two-bit secret message will 
be leaked through classical channel. In fact, Alice's and 
Bob's encoding operations are correlated by the formula 



U^ab) 



I* 



AB 



So, Eve can directly obtain the correlation between Al- 
ice's and Bob's encoding operations after the announce- 
ment of the final states. Let us assume that Alice 
publishes her measurement result \^ab)- As discussed 
above, the possible operations of Alice's and Bob's are 

^oo^TO' a Qi a En a w a w and a n cr ii (also see Table I) 
and then Eve can obtain partial information of Alice and 
Bob's secret message. 
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V. DISCUSSION AND CONCLUSION 

Although QD is insecure, it can still be applied to QKD 
as an approach to generate raw key. If Alice and Bob 
have realized that half of their secret message has leaked 
through classical channel, they can implement privacy 
amplification to distill secure final key bits. Let us em- 
phasize that quantum efficiency can truly be improved 
by some other approaches. Note that the efficient BB84 
has already been proposed and its unconditional security 
proof has also been presented [HI . 

In summery, QD is insecure because of the erroneous 
use of classical communication which reveals classical cor- 
relations between Alice and Bob's encoding operations. 
The classical channel is public so that everyone including 
Eve can access it to attain the correlations between Alice 



and Bob's encoding operations. Our calculations showed 
that half of Alice and Bob's secret message would be 
leaked through classical channel in QD protocols. The 
quantum efficiency claimed in QD violates the Holevo 
bound. 

We note that when this study was completed, we found 
that the erroneous use of classical communication in QD 
was independently pointed out by Gao et al. 19]. 
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